Terms of Service - Pharmsmart

Loading

Terms and Conditions

  1. What the Platform Agreement is about
  2. Who the Platform Agreement is between
  3. How you accept the Platform Agreement, and when the Platform Agreement starts
  4. Setting up an account directly with Us
  5. Your rights to use Pharmsmart Account and your obligations
  6. Restrictions on your use of Pharmsmart.
  7. Our promises relating to Pharmsmart
  8. Data Protection
  9. Anti-Bribery and Corruption
  10. Anti-slavery
  11. Confidentiality & FOI
  12. Technical support and how we may access your Pharmsmart Account
  13. Intellectual Property Rights
  14. Our liability and responsibility to you if something goes wrong
  15. Pricing for Platform Applications and the different products and or modules within any such Platform Application.
  16. How the Platform Agreement may be brought to an end and what happens on termination
  17. What else do you need to know?
  18. Which laws govern the Platform Agreement?
  19. General Points

About Us & You

1. What the Platform Agreement is about

1.1If you are a user on our website, online platform or device of any kind (“Platform”) or any other software application accessed or used on or through the Platform (each a “Platform Application”), these terms and conditions describe your rights and obligations concerning access and use of the Platform and each applicable Platform Application and establish a contract between you and us on such terms and conditions (the “Platform Agreement”). Our Privacy Policy and Cookies Policy are also binding on the parties.

1.2In the Platform Agreement, where we say Pharmsmart or “Pharmsmart Account” we mean any type of business, user or other account held with us (Examples include, but not limited to, Branch Account, Personal Account and Head Office Account.)

1.3In the Platform Agreement:

  • “Affiliate” means (i) any entity that directly or indirectly controls, is controlled by, or is under common control of the subject entity, where “control” is the ownership or control (whether directly or indirectly) of at least 50% of the voting rights in the entity, or otherwise the power to direct the management and policies of the entity, or (ii) any entity with the same ultimate majority beneficial ownership as the subject entity – and an entity is an Affiliate only so long as such control or common majority beneficial ownership continues;
  • “Customer Data” shall mean the data, information or material provided, inputted or submitted by you or on your behalf into Pharmsmart, which may include data relating to your customers and/or employees.
  • “Customer Personal Data” has the meaning set out in clause 8.1.
  • “Data Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.
  • “Data Processor” a natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of the Data Controller.
  • “Data Protection Laws” means all applicable UK laws and regulations governing the use or processing of Personal Data, including the UK GDPR; the Data Protection Act 2018 (and regulations made thereunder) (DPA 2018); the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426) as amended from time to time.
  • “FOI Legislation” the Freedom of Information Act 2000 or any other applicable laws concerning freedom of information disclosure.
  • “Personal Data” means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • “Privacy Notice” means our privacy notice posted on www.pharmsmart.co.uk (or such other URL as we may notify to you) and which may be amended by Pharmsmart from time to time.
  • “Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction and “Process”, “Processed” and “Processes” shall be construed accordingly.
  • “Supervisory Authority” means the Information Commissioner's Office (ICO).
  • “UK GDPR” means the UK retained version of the General Data Protection Regulation.

1.4We may change these terms and conditions of the Platform Agreement at any time. We will make reasonable efforts to communicate any changes to you via a notification on or through the Platform or any Platform Application that you use or by sending an email to you, but it is up to you to ensure that you regularly check, read, understand and agree to the most recent version of the Platform Agreement on our website at www.pharmsmart.co.uk as you will be deemed to accept all changes if you continue to use any Platform Application.

2. Who the Platform Agreement is between

2.1The Platform Agreement is between: (1) the person or organisation authorised to access or use the Platform or any Platform Application under these terms and condition (and references to “you” or “your” is to such person or organisation); and (2) SPEAKS HOLDINGS LTD., a company incorporated in Barbados with registered number 51469, whose registered office is at G.L.M. Global Ltd. XS Solutions Centre, Salters, Saint George, Barbados, BB19000 or any of its Affiliates that from time to time that enters into a Platform Agreement with you on these terms and conditions to grant you access to or use of the Platform and/or Platform Applications (and references to “us”, “our”, “we” or “Platform Provider” is to such SPEAKS HOLDINGS LTD or its applicable Affiliate as the case may be).

2.2The Pharmsmart Account or correspondence from us to you will state who the Platform Provider is in your case, which could be: (i) SPEAKS HOLDINGS LTD, CDSMART LTD (a company incorporated in England with registered number 09639441, whose registered office is at 1 Clive House, Clive Street, Bolton, England, BL1 1ET), or (iii) any other Affiliate of SPEAKS HOLDINGS LTD.

2.3By entering into the Platform Agreement, we both agree to be bound by and keep to it.

3. How you accept the Platform Agreement, and when the Platform Agreement starts

3.1You accept or shall be deemed to accept every term and condition of the Platform Agreement, and the Platform Agreement starts, from the earliest of : (1) when during any registration, sign up or other scenario you tick a box or click on a button (or something similar) on the Platform or through any Platform application to accept the Platform Agreement by name, description or otherwise , (2) when you register for or use a Pharmsmart Account (or any part of it), and (3) when you first access or use any Pharmsmart Application. If you accept or are deemed to accept the Platform Agreement, pay the relevant subscription fees (where applicable) in full and on time, and continue to comply with all the terms and condition of the Platform Agreement, we shall give you the right to access and use your Pharmsmart Account, and Platform Applications that are a part of your Pharmsmart Account, in the way described in the Platform Agreement. You must not use your Pharmsmart Accounts or any Platform Application in any other way.

3.2The Platform Agreement will continue until terminated in accordance with clause 16 or any other clause in the Platform Agreement which by its express provisions allows a party to terminate the Platform Agreement.

3.3If you don't accept the Platform Agreement, you should contact us immediately and you must not use the Pharmsmart Account or any related Platform Application.

4. Setting up an account directly with Us

4.1We will give you your sign-in details and passwords to enable you to use your Pharmsmart Account (the “sign-in information”) once you have registered with us. If you wish to redeem a promotion or activation code you must enter this as part of the registration process. You will need to activate your Pharmsmart Account within 28 days of receiving the activation email which we will send to the email address you have registered with us. Failure to activate your Pharmsmart Account may lead to an inability to access any data which may have been entered into that Pharmsmart Account .

4.2You may take advantage of any free trial we from time to time offer of a Pharmsmart Account or Platform Application. We will confirm the duration of any applicable free trial period in a confirmatory email following registration. You accept that we may withdraw or block any access or usage of a free trial at any time, for any reason and to any extent.

4.3If you are a new customer to the Platform or any Platform Application and elect to subscribe to access and use the same immediately, without a free trial, by signing up and entering your payment details, you will receive such discount as we may from time to time determine (“Discount”) off the recommended retail price for 6 calendar months (or such other period as we specify on our website or in our marketing literature) starting with the month in which we accept your valid payment details. You will be charged for access to and/or usage of the applicable Platform Application(s) from the date you provide your payment details, and your first invoice will be generated on the first day of the next calendar month but prorated depending on the date you signed up for such Platform Application(s). After expiry of any Discount the monthly price for your Platform Application software as a service will revert automatically without notice to our current list price unless we advise otherwise. Any break in payment resulting in a deactivation and subsequent reactivation of your Pharmsmart Account will result in your monthly subscription being reactivated at our current list price. Once you have subscribed to your first Pharmsmart Account with any Discount, any additional subscriptions by you of any Pharmsmart Account or related Platform Application(s) will be at our then-current price list for such Pharmsmart Account and/or Platform Application(s) (plus VAT or equivalent sales tax) as specified on our website or on or through the applicable Platform Application(s) from time to time.

4.4If you continue to use a Platform Application following your free trial period or if you have elected to subscribe to any Pharmsmart Account or Platform Application(s) without taking a free trial, you agree to pay the applicable subscription fee (plus any VAT or applicable sales tax) directly to us or our nominated agent via the payment method specified during registration or via any different payment method which we may notify to you from time to time, until either you or we end the Platform Agreement in one of the ways set out in clause 16. Our nominated agent for payments and for all other dealings with you on our behalf, until we notify you otherwise of any replacement, is CDSmart Ltd, an English company with registered number 09639441, whose registered office is at 1 Clive House, Clive Street, Bolton, England, BL1 1ET (“Nominated Agent”)

4.5You must pay amounts due to us by one of the following payment methods: (i) Direct debit, (ii) Credit or Debit card, or (iii) with our prior agreement by Cheque or BACS in respect of which 30 day payment terms apply. We have the right to charge an administration charge not less than £20 +VAT per payment for Cheque or BACS payments. ). We do not accept payment in cash.

4.6If at any time during your monthly or other subscription you want to include any additional Platform Application or component of the same within your subscription, you must pay the applicable fees for each additional Platform Application or component and your subscription fee will be adjusted pro rata from the date access to the additional Platform Application or component is made available to you until the commencement of your next subscription payment. If you wish to reduce access to any Platform Application or component, you may do so from the commencement of your next subscription payment due date when your fees will be calculated to take account of your reduced access to the Platform Application or component.

4.7If our customer for the Pharmsmart Account and related Platform Application(s) fails to pay any amount due to us under that customer’s Platform Agreement, we may (without prejudicing the application, enforcement or other aspect of any of our other rights or remedies): (1) suspend or restrict your access or use of the applicable Pharmsmart Account and any related Platform Applications or components of the same, (2) charge our customer interest on the amount overdue from the due date of payment up to and including the date of actual payment (as well as before and after judgment), at the rate of 4% per annum above the base rate for the time being of Lloyds Bank plc if our customer is based in the United Kingdom or 4% per annum above the base rate for the time being of The Bank of Ireland is based in Southern Ireland. Such interest shall accrue on a daily basis and be compounded quarterly and you (if you are our customer and not a an employee or representative of our customer who is an authorized user) will pay the interest to us immediately upon demand. If at any time we charge you an incorrect price, we reserve the right to rectify our invoice and claim payment from you for the correct amount which you agree to pay. If we have overcharged you, we will reimburse you for the amount by which you have been overcharged.

4.8We may increase the subscription fee for any Pharmsmart Account, Platform Application or component of the same at any time by giving you not less than 30 days’ written notice and such an increase will take effect from your next payment due date after this notice period has ended.

5. Your rights to use Pharmsmart Account and your obligations

5.1You must only use any subscribed for Pharmsmart Account or Platform Application for your internal business purposes and only to input your own information (i.e. information about your patients, staff, trading activity, transactions or other business data) into a Pharmsmart Account, Platform Application or any other aspect of the Platform. You are not licensed or permitted to access or use any Pharmsmart Account or Platform Application that is not part of any free trial given to you and/or is not part of any subscription by you or your employer/principal to the same. You are not licensed or permitted to access or use any Pharmsmart Account or Platform Application in breach of or in non-compliance of any of the terms and conditions of the Platform Agreement. As between you and us, all rights not granted under the Platform Agreement concerning the a Pharmsmart Account or Platform Application are reserved to us.

5.2If you are our customer, all Customer Data remains yours but your access and access by your authorized users to this information is dependent upon you complying with the Platform Agreement and your applicable subscription fee being paid in full. We take care to follow good industry practice to prevent data loss; however, you must keep copies of any information inputted into a Pharmsmart Account or any Platform Application (or generated by it) as we cannot guarantee that your information will not be lost, damaged or corrupted.

5.3You cannot sell, gift or otherwise assign or transfer your subscription/registration concerning (and/or any related rights to access or use) any Pharmsmart Account, Platform Application or any related log-in or sign in credentials, free trial, promotion or activation code, Discount or other entitlements or benefits concerning any of the same, to any other person or organisation; however, if you are our customer you may authorise your employees or representatives to access and use the same for the direct purposes of your business on and subject to the terms and conditions of the Platform Agreement. For example, you cannot sell any of the above if you no longer want to use Pharmsmart Account or Platform Application. If you, being a customer of ours, become insolvent or enter into any formal insolvency, winding up, strike off or dissolution process, an insolvency practitioner, administrator, liquidator or similar official cannot sell, gift or otherwise assign or transfer your subscription/registration concerning (and/or any related rights to access or use) any Pharmsmart Account, Platform Application or any related log-in or sign in credentials, free trial, promotion or activation code, Discount or other entitlements or benefits concerning any of the same, to any other person or organisation. Further information on this is set out in clause 17.4.

5.4You must comply with all applicable laws and legislation in respect of your use of your Pharmsmart Account or any Platform Application and for any filing or sharing. You must also ensure that the content of any files, data or uploads does not and will not: (1) contain any software viruses or other code, technology or data that is or can reasonably be expected to be harmful to the Platform or any Platform Application; (2) otherwise result in any injury, damage or harm to us, our reputation, the Platform, any Platform Application, any brand or goodwill attached or concerning the Platform or any Platform Application or any third party (including, without limitation, defamation or breach of confidentiality) and (3) contain anything which is unlawful, obscene, indecent or immoral or promotes, endorses or supports illegal, unlawful, deceitful or misleading purposes or activities.

5.5You acknowledge that we (and our Nominated Agent) is not your professional or other advisor in relation to the information you enter into any Pharmsmart Account or Plartform Application and we must not be used as a substitute for professional advice.

5.6You agree that if you receive any Pharmsmart Account or Platform Application at a special or discounted price you will only be able to receive the same at that special or discounted price if your subscription fees for Pharmsmart are paid in full and on time and you are otherwise fully compliant with the Platform Agreement. Any delay or other failure in payment which results in a suspension, termination or other deactivation of your Pharmsmart Account or Platform Application may result in your monthly subscription fee being reactivated at our then-current list price which will be higher than the special or discounted price you previously paid. Please visit our website for details of our pricing.

5.7If you are an authorised user of a Pharmsmart Account or Platform Application on behalf of a customer of ours then you cannot access or use anything that our customer cannot access or use; and (without prejudicing the application, enforcement or other aspects of our other rights and remedies) your right to access and use your Pharmsmart Account or any Platform Application(s) shall cease when our customer’s rights to access its Pharmsmart Account or the applicable Platform Application(s) cease.

6. Restrictions on your use of Pharmsmart.

6.1The following list gives examples of things you must not do with any Pharmsmart Account:

  • 6.1.1you must not try to gain unauthorised access to Pharmsmart Account or any Platform Application or any underlying technology;
  • 6.1.2you must not try to affect the availability of any Pharmsmart Account or any Platform Application to our users (sometimes called ‘a denial-of-service attack’);
  • 6.1.3you must not give anyone else any right (of any kind) to use or benefit from a Pharmsmart Account or any Platform Application in any way or provide any Pharmsmart Account or any Platform Application to others. For example, you cannot use Pharmsmart with someone else’s information to provide a service to them;
  • 6.1.4you may not use any Pharmsmart Account or any Platform Application to help you or anyone else develop replacement or competitor software. For example, you or your Affiliates or any respective directors or other officers, shareholders, members, partners, employers, principals, agents, customers/clients must not use or copy all or any part of any Pharmsmart Account’s or any Platform Application’s ‘graphical user interface’, ‘operating logic’ or ‘database structure’ for it to be part of, or to develop, any software or other product or technology, unless that use or copying is required or permitted by law without our express written consent.

6.2It is impossible to provide an exhaustive list of exactly what constitutes acceptable and unacceptable use of any Pharmsmart Account or any Platform Application. In general, we will not tolerate any use which damages or is likely to damage our business or reputation, the availability or integrity of any Pharmsmart Account or any Platform Application or which causes us or threatens to cause us to incur any legal, tax or regulatory liability or is otherwise contrary to the terms of the Platform Agreement. We will also not tolerate any conduct by you which is (or we reasonable deem to be) offensive, malicious, threatening, intimidating or otherwise unacceptable behavior (“Unacceptable Conduct”). If we consider you have participated in any Unacceptable Conduct, we may end the Platform Agreement by giving you 20 days’ notice in writing. In these circumstances you will not be entitled to a refund of any amounts you have paid to us in advance for your subscription period.

7. Our promises relating to Pharmsmart

7.1Whilst we aim to provide uninterrupted use of the Platform, any Pharmsmart Account or any Platform Application , unfortunately we can’t guarantee this, for example, some interruptions may be caused by reasons outside our control and in such circumstances, we will not be responsible for any failure to perform our obligations in the Platform Agreement, and we will be excused from that failure for so long as those circumstances continue.

7.2We do not promise, represent, guarantee or otherwise give any binding commitment or assurance:

  • 7.2.1that the Platform, any Pharmsmart Account or any Platform Application will be compatible with your web browser or computer set-up;
  • 7.2.2that the Platform, any Pharmsmart Account or any Platform Application will meet your own needs;
  • 7.2.3that you will be able to use the Platform, any Pharmsmart Account or any Platform Application in any particular way;
  • 7.2.4that you will get particular outputs from the Platform, any Pharmsmart Account or any Platform Application ;
  • 7.2.5that the accuracy, completeness, standard or relevance of the results you get from using the Platform, any Pharmsmart Account or any Platform Application ; or
  • 7.2.6that, where you use our technical support services, we will be able to fix your problem or remedy your issue at all or within any context, scenario or timeframe. The fact that you have told our representative about how you intend to use the Platform, any Pharmsmart Account or any Platform Application will not affect our rights and remedies under and/or concerning the Platform Agreement as the Platform, any Pharmsmart Account or any Platform Application has been developed for many different types of users, and you are responsible for setting up and accessing the Platform, any Pharmsmart Account or any Platform Application so that you can use it in the way you need, and as best suits your circumstances.

7.3You are solely responsible for obtaining and maintaining your internet and network connections and any associated problems are your responsibility.

7.4We will take reasonable steps to make sure that the Platform, any Pharmsmart Account or any Platform Application is free from viruses but we cannot guarantee this. We recommend that you use your own virus-protection software as we will not be responsible for any loss or damage caused by any viruses or other harmful technology that may infect your computer systems, data or other material owned by you.

7.5You are responsible for controlling who can access your Pharmsmart Account. We advise that you don’t allow anyone else to use your sign in information and that you change your password at regular intervals

7.6From time to time we may temporarily suspend access to the Platform, any Pharmsmart Account or any Platform Application, for maintenance, repairs or other reasons. We will try to do this outside normal business hours and provide advance notice but this might not always be possible. If we become aware that there is an issue with the Platform, any Pharmsmart Account or any Platform Application which affects you we may contact you to discuss the steps required to remedy that issue. You agree to provide all reasonable assistance in helping us remedy that issue.

7.7We promise that we will use our reasonable skill and care to provide any service to you under the Platform Agreement.

7.8The Platform Agreement describes all of our promises relating to the Platform, any Pharmsmart Account or any Platform Application. Unless the Platform Agreement says otherwise, we are not bound by any other contract terms, warranties or other type of promise. If, under any law, a particular term, warranty or other type of promise relating to the Platform, any Pharmsmart Account or any Platform Application would automatically be included in the Platform Agreement, we will only be bound by that term, warranty or promise to the extent prescribed by law.

8. Data Protection

8.1For the purposes of the Platform Agreement, the parties agree that, where you are our customer and not an authorised user of the customer, you are the Data Controller in respect of Personal Data contained within Customer Data (“Customer Personal Data”) and as Data Controller: (1) you have sole responsibility for its legality, reliability, integrity, accuracy and quality; and (2) You must ensure that no Customer Personal Data is uploaded into the Platform, any Pharmsmart Account or any Platform Application to the extent that: (i) you have no lawful basis under the Data Protection Laws to so upload and/or allow us to process the Customer Personal Data following such upload; and/or (ii) such uploading or processing may otherwise be contrary to the Data Protection Laws.

8.2You warrant and represent that:

  • 8.2.1you will comply with and will ensure that your instructions for the Processing of Customer Personal Data will comply with the Data Protection Laws;
  • 8.2.2you are authorized pursuant to the Data Protection Laws to disclose any Customer Personal Data which you disclose or otherwise provide to us regarding persons other than yourself;
  • 8.2.3you will where necessary, and in accordance with the Data Protection Laws, obtain all necessary consents and rights and provide all necessary information and notices to Data Subjects in order for:
    1. 8.2.3.1you to disclose the Customer Personal Data to us;
    2. 8.2.3.2us to Process the Customer Personal Data for the purposes set out in the Platform Agreement; and
    3. 8.2.3.3us to disclose the Customer Personal Data to: (a) our agents, service providers and other companies within the Pharmsmart group of companies; (b) law enforcement agencies; (c) any other person in order to meet any legal obligations on us, including statutory or regulatory reporting; and (d) any other person who has a legal right to require disclosure of the information.

8.3Clause 8.4 applies strictly subject to you having fully complied with the above terms of clause 8 and you not making any misrepresentation or breaches under the above terms of clause 8.

8.4Where we act as a Data Processor for the Customer Personal Data on your behalf and you are the data Controller for the Customer Personal Data, we must take care to ensure that:

  • 8.4.1appropriate technical and organisational measures are in place to protect against the harm that might result from unauthorised or unlawful processing of the Customer Personal Data and against accidental loss or destruction of, or damage to, the Customer Personal Data, appropriate to the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures;
  • 8.4.2we process the Customer Personal Data only as required by any applicable laws or in accordance with your documented instructions (and keep a written record of such instructions);
  • 8.4.3we promptly and at your cost provide such information, co-operation and assistance as you may reasonably require to enable you to comply with your obligations under the Data Protection Laws as a Data Controller in respect of any such Customer Personal Data, including: (i) notifying you of any reportable breach of this clause 8.4 by telephone or email as soon as reasonably practicable after becoming aware of the same, (ii) providing you with such reasonable assistance and information in relation to such reportable breach as you reasonably request; and (iii) reasonably assisting you to satisfy obligations to respond to requests from Data Subjects (including access requests) set out in the Data Protection Laws;
  • 8.4.4access to the Customer Personal Data is strictly limited to only those of our, the Nominated Agent’s or respective sub-contractor’s personnel, agents, and representatives as is reasonably necessary to fulfil obligations under the Platform Agreement and that such personnel, agents, and representatives are under an obligation to handle the Customer Personal Data in accordance with the obligations regarding confidentiality under the Platform Agreement;
  • 8.4.5provide you with such information as you reasonably require to be able to demonstrate compliance with the Data Protection Laws as Data Controller for the Customer Personal Data, and allow for audits and inspections of the facilities used by us or our Nominated Agent to process the Customer Personal Data; and
  • 8.4.6assist you to a reasonable extent in responding to any request from a Data Subject concerning Customer Personal Data and in ensuring compliance with our obligations under the Data Protection Laws with respect to security, breach notifications, impact assessments and consultations with supervisory authorities or regulators.

8.5You accept and confirm that we can use the Nominated Agent as a sub-processor to support our obligations as a Data Processor under the Platform Agreement.

8.6Where you are not our customer but are any other Data Subject whose Personal Data is processed by us as a Data Controller of that data, we shall process such Personal Data in accordance with our Privacy Policy and Cookies Policy.

8.7You accept that, as more particularly covered by our Privacy Policy, we can share your Personal Data or Customer Personal Data (as the case may be) with prospective or actual buyers (or their prospective or actual finance or credit providers) of our business or assets, our share capital or the share capital of any parent company of ours in the corporate chain of ownership above us.

9. Anti-Bribery and Corruption

9.1For the purposes of this clause 9, the expressions ‘adequate procedures’ and ‘associated with’ shall be construed in accordance with the Bribery Act 2010 and legislation or guidance published under it.

9.2Each party shall comply with applicable Bribery Laws including ensuring that it has in place adequate procedures to prevent bribery and ensure that: (a) all of that party’s personnel; (b) all others associated with that party; and (c) all of that party’s subcontractors; involved in performing the Platform Agreement so comply.

9.3Without limitation to clause 9.2, neither party shall make or receive any bribe (as defined in the Bribery Act 2010) or other improper payment or allow any such to be made or received on its behalf, either in the United Kingdom or elsewhere and shall implement and maintain adequate procedures to ensure that such bribes or payments are not made or received directly or indirectly on its behalf.

10. Anti-slavery

10.1Both parties shall and shall procure that its officers, employees, agents and subcontractors (if any) shall: (a) comply with all Applicable Laws, and codes relating to modern anti-slavery and human trafficking including the Modern Slavery Act 2015 (Relevant Requirements) that are applicable within the United Kingdom; (b) not engage in any activity, practice or conduct which would constitute an offence under Chapter 30 Part 1 sections 1, 2 or 4 of the Modern Slavery Act 2015 if such activity, practice or conduct had been carried out either wholly or partially within the UK; and (c) have and shall maintain in place throughout the term of the Platform Agreement its own policies and procedures, including adequate procedures under the Modern Slavery Act 2015, to ensure compliance with the Relevant Requirements (especially Part 6 section 54), and will enforce them where appropriate.

11. Confidentiality & FOI

11.1Each party shall keep confidential all Confidential Information of the other party (which includes the Confidential Information of Affiliates) and shall only use the same as required to perform the obligations (or enforce rights and remedies) under the Platform Agreement. The restrictions under this clause shall not apply to: (a) any information which was in the public domain at the date of the Platform Agreement; (b) any information which comes into the public domain subsequently other than as a consequence of any breach of the Platform Agreement; (c) any information which is independently developed by a party without using information supplied by the other party (which includes information supplied by Affiliates); or (d) any disclosure required by law (including FOI Legislation) or a regulatory authority or otherwise by the provisions of the Platform Agreement.

11.2No media releases, public announcements or public disclosures by either of the parties or the parties’ employees or agents or subcontractors relating to the Platform Agreement or its subject matter, including but not limited to promotional or marketing material, (but excluding any announcement intended solely for internal distribution by the parties or any disclosure required by legal, accounting or regulatory requirements) may be made without the prior written approval of the other.

11.3We acknowledge that you may be subject to FOI Legislation and agrees to assist and co-operate with you (at our time and expense) to enable you to comply with your obligations under FOI Legislation.

11.4Without prejudice to the generality of clause 11.2, we shall: (a) transfer to you any FOI Legislation information request relevant to the Platform Agreement as soon as practicable and in any event within 2 (two) Business Days of receiving a FOI Request; and (b) in relation to information held by Pharmsmart on your behalf, will provide you with details about and/or copies of all such information that you request and such details and/or copies shall be provided within 5 (five) Business Days of a request from you (or such other period as you may reasonably specify) and in such forms as you may reasonably specify.

11.5You shall be responsible for determining whether information is exempt information under FOI Legislation and for determining what information will be disclosed in response to a FOI Request in accordance with FOI Legislation.

11.6We shall not be obliged to respond to any person making a request for disclosure under FOI Legislation, save to acknowledge receipt, unless expressly authorised to do so by you or others required by law to do so.

12. Technical support and how we may access your Pharmsmart Account

12.1During the period of your subscription, we aim to give you 24-hour technical support 7 days a week (although there may be times where we are unable to do this for reasons outside our control) covering problems you may have using the Platform, any Pharmsmart Account or any Platform Application. We may provide this by telephone, email, web-chat, remote assistance (where we will access your Account and data online) or self-help online support as described in the Help Section of Pharmsmart. You grant us the right to access your systems to provide such support (and, in the case of the Platform, any Pharmsmart Account or any Platform Application, you shall ensure that we will have access to your systems for the Lead Business and each Additional Business using the Platform, any Pharmsmart Account or any Platform Application so that we may provide you with support). If we do not have this access we may not be able to provide you with support.

12.2We may release enhancements or provide additional features to the version of the Platform, any Pharmsmart Account or any Platform Application to which you get access and use of at the start of the Platform Agreement (“Updates”). The frequency and how we provide any Updates to you will be at our discretion. We will tell you when we are going to provide such Updates via a notification the Platform, any Pharmsmart Account or any Platform Application or by sending an email to you.

12.3Where we produce a whole new version of the Platform, any Pharmsmart Account or any Platform Application (as opposed to merely an Update), nothing in the Platform Agreement entitles you to access or use the same without a separate express written agreement between you and us.

12.4We will not at any time give you technical support or other assistance for any third-party supplied and/or third-party maintained hardware, software, services or other equipment that are used with the Platform, any Pharmsmart Account or any Platform Application

13. Intellectual Property Rights

13.1Although you have rights to access and use the Platform, any Pharmsmart Account or any Platform Application as described in the Platform Agreement, as between you and us:

  • 13.1.1you do not own any of the copyright, trade marks, trade-secrets, know-how, database rights, rights to register, rights to enforce or other intellectual property rights in or concerning: (1) the Platform, any Pharmsmart Account or any Platform Application; and/or (2) any trademark, logo or content on the same not provided by you; and
  • 13.1.2you have no right to apply to register or own (or use in any administrative, promotional or other commercial or business activity of any kind) any url, social media handle, social media user name, corporate name, trading name, product name, service name, brand, trade mark, style or log that contains the expression “pharmsmart”, any other name, style or log on the Platform not provided by you or anything that looks or sounds like the same.
  • 13.1.3We (or the third party from whom we obtain our rights if we are not the owner) continue to own the intellectual property rights mentioned in clause 13.1 above, including any software we provide to replace all or part of the Platform, any Pharmsmart Account or any Platform Application. The only rights you have to the Platform, any Pharmsmart Account or any Platform Application are as expressly set out in the Platform Agreement.

13.2You undertake not to use our name or any of its trade marks or brands in any promotion or marketing or other announcement without our express written consent.

13.3You undertake not to use our Nominated Agent’s name or any of its trade-marks or brands in any promotion or marketing or other announcement without our express written consent.

14. Our liability and responsibility to you if something goes wrong

14.1This clause sets out our entire liability to you (including any Lead Business and/or Additional Business) which arises out of or in connection with the Platform Agreement whether in contract, tort (including negligence or breach of statutory duty), misrepresentation or otherwise.

14.2Subject to clauses 14.4 and 14.5, our total liability in contract, tort (including negligence or breach of statutory duty), misrepresentation or otherwise arising under or in connection with the Platform Agreement will be limited to paying you an amount which is equal to the higher of: (1) £10,000, and (2) the total of all fees you have paid to us for your use of the relevant Platform Application (such relevant Platform Application being the product forming the subject matter of the claim) in the 12 months before you became aware or could reasonably be deemed to have become aware of your claim for the same

14.3Subject to clauses 14.4 and 14.5, we will not be responsible whether in contract, tort (including negligence or breach of statutory duty), misrepresentation or otherwise for any of the following (even if we knew or should have known there was a possibility you could suffer or incur such loss or damage):

  • 14.3.1any kind of loss of profit, business or revenue and/or depletion of goodwill or similar losses;
  • 14.3.2any kind of loss of use or loss of or corruption/damage to Customer Data or other data/information inputted by you into the Platform, a Pharmsmart Account or any Platform Application;
  • 14.3.3any kind of interruption to your business or damage to information, however that interruption or damage is caused;
  • 14.3.4any kind of losses you suffer as a result of using the Platform, any Pharmsmart Account or any Platform Application other than as described in the relevant documents or instructions from us concerning the same;
  • 14.3.5any kind of wasted expenditure;
  • 14.3.6any kind of punitive damages;
  • 14.3.7any kind of loss or damage which we could not have reasonable known about at the time you entered into the Platform Agreement;
  • 14.3.8any kind of special, indirect or consequential loss or damage;
  • 14.3.9any kind of losses to the extent caused by, made worse by, contributed to by or arising from: (1) any statement, act or omission from a person other than us, any Affiliate of ours or respective sub-contractors, directors, employees or agents, or (2) any event or circumstance that can reasonably be considered as being beyond our reasonable control (to include, but not limited to, natural disasters, changes in the law, changes in the economic environment, government action, malicious acts of third party including online hacking or cybercrime, or third party equipment failure);

14.4Nothing in the Platform Agreement will exclude or limit our liability for:

  • 14.4.1fraud;
  • 14.4.2death of or personal injury to any person as a result of our negligence; or
  • 14.4.3any other matter which cannot be excluded or limited under applicable law.

14.5All warranties, conditions and other terms implied by statute or common law are, to the fullest extent, permitted by law, excluded from the Platform Agreement.

14.6Your and our responsibilities under the Platform Agreement are reasonable because they reflect that:

  • 14.6.1we cannot control how, and for what purposes, you use Pharmsmart;
  • 14.6.2we have not developed Pharmsmart specifically for you; and
  • 14.6.3although we follow good industry practice, it is not economically possible for us to carry out all the tests necessary to make sure that Pharmsmart is problem or error free.

15. Pricing for Platform Applications and the different products and or modules within any such Platform Application.

15.1 We reserve the right to charge our customer for the Platform, any Pharmsmart Account or any Platform Application (and such customer shall pay) for each product or module within the Platform, any Pharmsmart Account or any Platform Application. Examples of Platform Applications include POM register, Temperature log, CD destruction register, CDsmart, Reportsmart, Methsmart, Transfersmart and Head-office. Please note this list is not exhaustive and only includes some of the most common modules / product.

15.2We reserve the right to change prices at any time without further notice. However, if you have ordered but not yet paid for a Platform Application, we guarantee the price for one month from when the order was placed.

16. How the Platform Agreement may be brought to an end and what happens on termination

16.1We may end the Platform Agreement:

  • 16.1.1immediately if we do not receive your subscription fee or any other fees due to us under the Platform Agreement on or by the relevant due date; or
  • 16.1.2at any time on giving you at least 30 days' notice and if we do, we will refund to you any amounts you have paid in advance for the applicable subscription period calculated from the date of termination.

16.2You may end the Platform Agreement at any time by sending us an email to [email protected]. . In this event, the agreement will end 1 calendar month from the date of receipt. We will not give you a refund for any amounts you have paid in advance for the applicable subscription period, unless it falls within 3 months of your first subscription with Pharmsmart and then only if you follow the procedure set out in section 16.3 (Claiming under the money back guarantee) below, and you must immediately pay all amounts you owe to us by the date the Platform Agreement ends. If you continue to use any Pharmsmart Account or any Platform Application after the expiry of any subscription period, we will be entitled to charge you for such use at our then current applicable fees.

16.3 If you choose not to pay the subscription fee to continue to use the any Pharmsmart Account or any Platform Application at the end of any trial period, your access to the same will immediately end.

16.4If you or we discover that the other has done something which is not allowed by the Platform Agreement, or has not done something that must be done, the one making such discovery can give the other written notice that the matter must be put right within 30 days. If the matter is put right in that time, no further action will be taken. If it is not put right in that time, the person who made the discovery may end the Platform Agreement immediately upon giving the other notice in writing.

16.5The Platform Agreement will automatically (i.e. without us having to tell you or you having to tell us) and immediately end without refund if either of us becomes bankrupt (or something similar happens), is not able to pay outstanding debts, stops trading or becomes insolvent (or something similar happens). In those circumstances any monies due from you will become immediately due and payable and neither of us will have any further obligation to the other under the Platform Agreement.

16.6 No matter how the Platform Agreement ends, the information you store in Pharmsmart remains your information and you can access it on a read only basis. If you wish to access your information after the Platform Agreement has ended, you agree to pay our reasonable charges for that access.

16.7In addition to our rights to end the Platform Agreement, we may also suspend your use of Pharmsmart at any time if we do not receive payment in full when due or if we suspect that you has breached any part of the Platform Agreement.

16.8Any suspension of your Pharmsmart Account will continue until such time that the breach in question has been remedied to our reasonable satisfaction and/or we have received payment from you in full. Where we suspend or terminate your use of Pharmsmart under this clause, we may at our discretion agree to reactivate your Account subject to you paying to us a reactivation fee. In accordance with clause 5.6 above, if you received Pharmsmart at a special or discounted price your monthly subscription fee may be reactivated at our then-current list price which will be higher than the special or discounted price you previously paid. Please visit our Website for details of our pricing.

17. What else do you need to know?

17.1If a court or similar body decides that any wording in the Platform Agreement cannot be enforced, that decision will not affect the rest of the Platform Agreement, which will remain binding on both parties. However, if the wording that cannot be enforced could be enforced if part of it is deleted, we will both treat the relevant part of the wording as if it is deleted.

17.2If you or we fail to, or delay in, exercising any rights under the Platform Agreement, that will not mean that those rights cannot be exercised in the future.

17.3The Platform Agreement and the documents we refer to above constitute the entire agreement between you and us for your use of the Platform, any Pharmsmart Account or any Platform Application, and replaces all documents, information and other communications (whether spoken or written) between us for such use.

17.4As specified in clause 5.3, the Platform Agreement is personal to you and may not be transferred, assigned, subcontracted, licensed, charged or otherwise dealt with or disposed of (whether in whole or in part) by you without our prior written consent, our prior written consent not to be unreasonably withheld. We may transfer, assign, subcontract, license, charge or otherwise deal with or dispose of (whether in whole or in part) the Platform Agreement at any time without your consent.

17.5A person who is not a party to the Platform Agreement has no right to enforce any term of it.

17.6Where either party is required to notify the other party by email, the party shall be deemed to have received the email on the first business day following transmission.

18. Which laws govern the Platform Agreement?

18.1If you register or subscribe to use the Platform, any Pharmsmart Account or any Platform Application in the United Kingdom, the Platform Agreement is governed by the laws of England and Wales and you and we both agree that the courts of England and Wales will be the only courts that can decide on legal disputes or claims about the Platform Agreement.

18.2If you register or subscribe to the Platform, any Pharmsmart Account or any Platform Application in the Southern Ireland the Platform Agreement is governed by the laws of England and Wales and you and we both agree that the courts of Ireland will be the only courts that can decide on legal disputes or claims about the Platform Agreement.

18.2If you register or subscribe to the Platform, any Pharmsmart Account or any Platform Application in a jurisdiction outside of jurisdictions covered by clauses 18.1 and 18.2 above (a “Clause 18.3 Jurisdiction”), the Platform Agreement is governed by the laws of England and Wales and you and we both agree that the courts of the Clause 18.3 Jurisdiction will be the only courts that can decide on legal disputes or claims about the Platform Agreement.

19. General Points

19.1Headings, sub-headings and content lists in the Platform Agreement do not affect its interpretation.

19.2References to a clause or Schedule is to a clause or Schedule of the Platform Agreement.

19.3References to an attachment, appendix or annex is to an attachment, appendix or annex to the Schedule in which its is mentioned unless stated otherwise.

19.4References to a paragraph are to a paragraph of the Schedule in which it appears unless stated otherwise.

19.5References to a document by name or otherwise include any changes or novations made in accordance with the Platform Agreement.

19.6References to specific legislation by name or otherwise include all amendments, extensions, restatements and subordinate legislation in effect at the time.

19.7References to one gender include all genders and entities without gender.

19.8Singular words include the plural form, and vice versa.

19.9Wording introduced by ‘including’, ‘include’, ‘in particular’ or similar expressions provides non-exhaustive illustrative examples only.

19.10‘person’ includes a natural person, body corporate or unincorporated body, association, organisation, society, agency, office or department.

19.11‘writing’ includes emails.

19.12‘shall’ and ‘will’ have the same meaning as ‘must’.

19.13Translations of any aspect of Platform Agreement into other languages are not binding.

19.14Each party affirms that it:

  • 19.14.1has had the opportunity to seek independent legal and other professional advice to assess entering into and complying with the Platform Agreement;
  • 18.14.2has the necessary rights, powers, licenses, accreditations, and legal capacity to enter into and comply with the Platform Agreement; and
  • 19.14.3will ensure prompt execution of documents and performance of necessary actions by that party and/or its related third parties to fully apply and enforce the Platform Agreement.

19.15The Platform Agreement is the only agreement, arrangement, understanding and commitment between the parties concerning its subject matter, excluding all pre-contractual statements not expressly included in writing in the Platform Agreement.

19.16Subject to clause 1.4, the parties must agree in writing to change the Platform Agreement.

19.17No third parties (other than the Nominated Agent) can enforce the Platform Agreement under the Contracts (Rights of Third Parties) Act 1999 or otherwise.

19.18The parties deem the Platform Agreement to be fair and reasonable, and intend its full enforceability. If any part is invalid: (i) the parties will collaborate to modify (or, as a last resort, remove) that part while preserving the parties’ commercial intent, and (ii) the remainder of the Platform Agreement remains valid and enforceable.

19.19Granting time or delaying enforcement doesn't waive rights or remedies. Waivers must be written to be valid.

19.20Each party's rights and remedies apply independently without prejudice to each other. Rights and remedies under the Platform Agreement are cumulative and repeatable.

19.21Each party will not make any statements or comments about the other party, to any third party, on any online or offline forum/platform or in any other way - in each case that can reasonably be considered to be defamatory, derogatory or (even if true) deliberately or negligently designed or intended to harm the reputation or commercial success of the other party.

19.22The parties keep each other informed of their contact details. Notices must be given in writing and in English. Notices sent by post or given by hand delivery must go to the recipient's latest postal address. Notices sent by email must go to the recipient’s latest email address. Notices are deemed served: (i) 72 hours after posting, (ii) 1 hour after confirmed email dispatch (if emailed by 4 pm on a Business Day) or by 9 am on the next Business Day (if emailed after 4 pm or on a day other than a Business Day), or (iii) immediately, for hand delivery. A “Business Day” is any day other than Saturday, Sunday or a public holiday in England.

Privacy Policy

This privacy policy is provided in a layered format so you can click through to the specific areas set out below. Alternatively, you can download a pdf version of the policy here:
[PDF VERSION]. Please also use the Glossary below to understand the meaning of some of the terms/expressions used in this privacy policy.

  1. WHO WE ARE & IMPORTANT INFORMATION
  2. DATA WE COLLECT ABOUT YOU
  3. HOW IS YOUR PERSONAL DATA COLLECTED
  4. HOW WE USE YOUR PERSONAL DATA
  5. DISCLOSURES OF YOUR PERSONAL DATA
  6. INTERNATIONAL TRANSFERS
  7. COOKIES AND OTHER TECHNOLOGIES
  8. DATA SECURITY
  9. DATA RETENTION
  10. YOUR LEGAL RIGHTS

1. WHO WE ARE & IMPORTANT INFORMATION

Who We are

The privacy policy is issued separately by SPEAKS HOLDINGS LTD and CDSMART LTD for their respective independent businesses and related operations and affairs.

SPEAKS HOLDINGS LTD is a company incorporated in Barbados with registered number 51469, whose registered office is at G.L.M. Global Ltd. XS Solutions Centre, Salters, Saint George, Barbados, BB19000.

CDSMART LTD is a company incorporated in England with registered number 09639441, whose registered office is at 1 Clive House, Clive Street, Bolton, England, BL1 1ET

Any reference to “we”, “us, “our” is a reference to each of the above stated companies for their own respective independent businesses and related operations and affairs.

Any reference to “Speaks Holdings” is to the said Speaks Holdings Ltd.

Any reference to “CDSmart” is to the said CDSmart Ltd.

Privacy Policy Purpose

This privacy policy aims to give you information on how we collect and process your personal data.

It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other applicable notices and privacy policies and is not intended to override them.

Any particular part of this privacy policy that only applies to one of the companies will expressly state which company it applies to.

Controller & Processor Roles

We operate in dual capacities: depending on the nature of the information and the context of its processing we may be a controller, a processor or both in respect of the applicable personal data.

  • Controller Status: When we act as a controller, we determine the purposes and means of processing personal data. This typically involves situations where we collect personal data directly from individuals for specific purposes outlined in this privacy policy. As a controller, we are committed to ensuring that your personal data is processed lawfully, transparently, and in accordance with applicable data protection laws.
  • Processor Status: In some instances, we may also act as a processor, where we process personal data on behalf of another organisation (the data controller) in accordance with their instructions. This may involve providing services or processing personal data as directed by our clients, customers or other counterparties in a commercial or trading transaction or relationship. When acting as a processor, we adhere to contractual obligations and take appropriate measures to safeguard the personal data entrusted to us. In some circumstances CDSmart provides services to Speaks Holdings and in that context may (as processor) from time to time process personal data for Speaks Holdings (as controller for such personal data).
  • Your rights: Regardless of whether we act as a controller or processor, individuals have certain rights regarding their personal data under applicable data protection laws. These rights may include the right to access, rectify, erase, restrict processing, or object to the processing of their personal data. Further information on these rights can be read in Your Legal Rights.

Data Processing Officer & Contact Details

Speaks Holdings has appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy policy concerning Speaks Holdings. If you have any questions about this privacy policy concerning Speaks Holdings, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out below.

You have the right to make a complaint against Speaks Holding at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues ( https://ico.org.uk/ ). You may also lodge a complaint directly with the Data Protection Commission (DPC) in Barbados ( https://www.gov.bb/Departments/data-protection-commissioner ). Speaks Holdings would, however, appreciate the chance to deal with your concerns before you approach the ICO or the DPC so please contact us in the first instance.

CDSmart has appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy policy concerning CDSmart. If you have any questions about this privacy policy concerning CDSmart, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out below.

You have the right to make a complaint against CDSmart at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues ( https://ico.org.uk/ ). CDSmart would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Changes to the privacy policy and your duty to inform us of changes

We keep our privacy policy under regular review. As such, we may change this privacy policy from time to time. However, we will not reduce your rights under this privacy policy.

This version was last updated on 13/11/2024.

Historic versions can be obtained by contacting us.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship or interaction with us.

Third-party links

Our website or software applications may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites, plug ins or applications, and are not responsible for their privacy statements or privacy standards. When you leave our website or software application, we encourage you to read the privacy policy of every third party website or third party software application that you visit, access or use.

2. DATA WE COLLECT ABOUT YOU

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may from time to time collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data

includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, gender, job role and professional body registration.

Contact Data

includes billing address, delivery address, email address and telephone numbers.

Financial Data

includes bank account and payment card details.

Transaction Data

includes details about payments to and from you and other details of products and services you have purchased from us.

Technical Data

includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

Profile Data

includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.

Usage Data

includes information about how you use our website, software applications, products and services

Marketing and Communication Data

includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Recorded data

audio and/or visual recordings made from telephone calls, video conferencing and/or CCTV recordings

Special Category Data
  • Health Data: information related to physical or mental health, medical history, medication, treatment or other information that can be used to assess health status.
  • Other Data: race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, genetic or biometric data.

We also collect, use and share aggregated data such as statistical or demographic data for any purpose.

  • aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity.
  • For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website or application feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

If you fail to provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have with you or a client/customer, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you or a client/customer (for example, to provide you or our client/customer with goods or services). In this case, we may have to cancel a product or service you or our client/customer has with us but we will notify you or our client/customer if this is the case at the time.

3. HOW IS YOUR PERSONAL DATA COLLECTED

We use different methods to collect data from and about you including through:

Direct Interactions

You may give us your personal data or Special Category Data as follows, when you (for yourself or on behalf of your employer or business) or your pharmacist or staff working at a pharmacy that you use:

  • register to use or upload information to our or our client’s/customer’s website or software application;
  • sign up to our or our client’s/customer’s newsletter;
  • purchase or receive from us or our client’s/customers any product or service;
  • sell or supply to us or our clients/customers any product or service;
  • respond to a questionnaire, survey, assessment or other request for information as part of a consultation or otherwise;
  • take part in a competition or prize draw;
  • enter into (and/or comply with) any contract, arrangement, understanding or commitment with us or our client/customer;
  • interact with us through any telephone call, SMS texts, instant messaging or any online call or meeting platform or application;
  • interact with us through any social media platform or application;
  • interact with us through email or by post;
  • interact with us through any “in person” offline meeting;
  • have any other interaction with us.
Automated technologies or interactions

As you interact with our website or software application, we will automatically collect Technical Data about your equipment, browsing actions and patterns.

We collect this personal data by using cookies, server logs and other similar technologies.

We may also receive Technical Data about you if you visit other websites or software applications employing our cookies. Please see our cookie policy for further details.

Third parties or publicly available sources

We will receive personal data about you from various third parties and public sources as set out below:

4. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where it is necessary for our legitimate interests (or the legitimate interest of our client, customer or other third party) and your interests and fundamental rights do not override those interests.

Which means the interest of our business in conducting and managing our business to include, but not limited to, enabling us to give you or our client/customer the best service/product and the best and most secure experience. This includes to monitor, measure, improve and protect our content, website, applications and services and provide an enhanced, personal, user experience for you.

We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.

We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.

Where it is necessary to perform a contract

Which means processing your personal data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

Where it is needed to comply with a legal obligation

Which means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.

Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. In this context a third party does not include a client or customer of ours who is in contract negotiations with you, has a contract with you or has sold a product or service to you and whose behalf we are interacting with you.

You have the right to withdraw consent to marketing at any time by contacting us.

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground, we are relying on to process your personal data where more than one ground has been set out in the table below.

Purpose/Activity Lawful basis for processing including basis of legitimate interest
To register you as a new client, customer or website/application user. Performance of a contract with you
To process and deliver orders or perform services to you or our client/customer including:
(a) Manage payments, fees and charges
(b) Collect and recover money owed to us or any of our clients or customers
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to recover debts due to us)
To manage our relationship with you or our client/customer or website/application user, which will include:
(a) Notifying you about changes to applicable terms or privacy policy
(b) Asking you to leave a review or take a survey
(a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To administer and protect our business and this website or our software applications (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
(b) Necessary to comply with a legal obligation
To contact you, to see if you would like to take part in our customer research (for example, feedback on your use of our applications, products and services); assisting with research and development. This is necessary for out legitimate interests to improve our services, products and applications for you;
To deliver relevant content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about goods or services that may be of interest to you Necessary for our legitimate interests (to develop our products/services and grow our business)
To operate/administer a prize draw or competition that you respond to or participate in or
to enable you to partake in a prize draw, competition or complete a survey
(a)Performance of a contract with you
(b)Necessary for our legitimate business interests (to develop our services and to grow our business).
Business administration, continuity, survival, improvement or growth (a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to keep the business running, to help it grow or to realise any profit or other benefit)
To defend or enforce our rights (a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to keep the business running, to help it grow or to realise any profit or other benefit)

Choices

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

Promotional offers from us

We may use your Identity Data, Contact Data, Technical Data, Usage Data and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving that marketing.

Third-party marketing

We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

Opting out

You can ask us or third parties to stop sending you marketing messages at any time by:

  • following the opt-out links on any marketing message sent to you; or
  • contacting us at any time.

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

5. DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with the parties set out below for the purposes set out in the table under the Purposes for which we will use your personal data section above.

Internal Third Parties

Speaks Holdings may share personal data with its service provider and licensee CDSmart and, in turn, CDSmart may share personal data with its principal/customer and licensor Speaks Holdings.

Speaks Holdings is based in Barbados. CDSmart is based in England.

External Third Parties

The following third parties:

  • Professional advisers or agents acting as processors or separate controllers including lawyers, bankers, auditors and insurers based in India, USA, the EU or UK.
  • Suppliers of goods or services not covered above acting as processors or separate controllers providing goods and services to us and based in the India, Barbados, USA, the EU or the UK. This includes software providers like Addvantage Technologies concerning single sign on, integration and more efficient service delivery facilities/services.
  • HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom or Barbados who require reporting of processing activities in certain circumstances.
  • Finance credit facilities providers (in each case whether or not holding security interests over us or our assets) based in the UK or EU.
  • Prospective or actual buyers (or their prospective or actual finance or credit providers) of our business or assets or shares in our share capital or the share capital of any of our parent companies based in the UK or anywhere else in the world. If a change in share or business ownership happens, the new owners may use your personal data in the same way as set out in this privacy policy.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. INTERNATIONAL TRANSFERS

International transfers of personal data may be necessary for the performance of a contract between you and us or for the implementation of pre-contractual measures taken at your request.

Additionally, international transfers may also be based on your explicit consent or other lawful grounds permitted or required under applicable data protection laws.

To ensure that your personal data receives an adequate level of protection during international transfers, we may rely on one or more of the following transfer scenarios:

Going to a country, territory, sector or entity determined by the UK and/or EU to provide an adequate level of protection for personal data

At the date of this privacy policy being issued, this covers:

  • EU member states: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden
  • Other EEA countries: Iceland, Liechtenstein and Norway;
  • EU or EEA institutions, bodies, offices or agencies;
  • Gibraltar;
  • Republic of Korea;
  • Countries, territories and sectors covered by the European Commission’s adequacy decisions as at 31.12.2020:
    • Andorra, Argentina, Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland and Uruguay;
    • Canada – only covers data that is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA);
    • Japan – only covers personal data transferred to private sector organisations subject to Japan’s Act on the Protection of Personal Information. This does not include transfers of the types listed in the EU’s adequacy decision for Japan; or
    • United States of America – only covers data which is transferred under the UK Extension to the EU-US Data Privacy Framework
Standard Contractual Clauses are used

We may enter into standard contractual clauses approved by ICO in the UK, or the European Commission in the EU, as applicable, or other relevant authorities with recipients of your personal data (such as service providers in India) to ensure that they provide an adequate level of protection

7. COOKIES AND OTHER TECHNOLOGIES

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Please read our cookies policy for more information.

8. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

If you believe your account has been compromised, please contact us.

9. DATA RETENTION

How long will you use my personal data for?

To the extent permitted by applicable law, we retain information about you after closure of your Pharmsmart Account if your application for a Pharmsmart Account is declined or if you decide not to proceed. This information will be held and used for as long as permitted for legal, regulatory, fraud prevention and legitimate business purposes.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us

In some circumstances you can ask us to delete your data: see Your Legal Rights below for further information.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

10. YOUR LEGAL RIGHTS

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights are as follows:

Request access

You can request access to your personal data (known as “data subject access request”).

This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction

You can request correction of the personal data that we hold about you.

This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure

You can ask us to erase your personal data.

This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.

You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.

Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing

You can object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.

You also have the right to object where we are processing your personal data for direct marketing purposes.

In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request a restriction of processing

You can request that we restrict the processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:

  • If you want us to establish the data's accuracy.
  • Where our use of the data is unlawful, but you do not want us to erase it.
  • Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
  • You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
Request a transfer

You can request that we transfer of your personal data to you or to a third party.

We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.

Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent

You can withdraw consent to the processing of your personal data in situations where we relied on your consent to do so.

However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us

Manifestly unfounded or excessive

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

Redactions

Under section 15 and Schedule 2 of Data Protection Act 2018 certain personal data cannot be provided if requested from us. This includes, for example:

1Personal data of other individuals who have not given consent to disclosure (and it would be unreasonable to make the disclosure).

2Personal data consisting of legally privileged information, which is (in summary):

  • confidential in nature;
  • except where litigation is in contemplation, made solely between client and professional legal adviser acting in a professional capacity; and
  • made for the dominant purpose of obtaining or providing legal advice or being used by lawyers in possible or probable litigation.

3Personal data processed for the purposes of management forecasting or management planning in relation to a business or other activity, to the extent that those provisions would be likely to prejudice the conduct of that business or other activity.

4Personal data that consists of records of the intentions in relation to any negotiations with you as data subject, to the extent that the application of those provisions would be likely to prejudice those negotiations.

5Personal data consisting of a reference given or to be given in confidence for the purposes of any of the following:

  • Education, training or employment, or prospective education, training or employment.
  • Placement, or prospective placement, of the data subject as a volunteer.
  • Appointment, or prospective appointment, of the data subject to any office.
  • Provision, or prospective provision, by the data subject of any service.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Cookies Policy

This cookies policy should be read in conjunction with our privacy policy.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer or mobile device if you agree. Cookies contain information that is transferred to your computer's or mobile device’s hard drive.

We use the following cookies:

Category of Cookie Explanation
Strictly Necessary Cookies

These are cookies that are required for the operation of our website, online platform or application. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.

Analytical or performance cookies

These cookies allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website, online platform or application works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies

These cookies are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Targeting cookies

These cookies record your visit to our website, the pages or sections you have visited and the links you have followed. We will use this information to make our website, online platform or application, and the advertising displayed on the same, more relevant to your interests. We may also share this information with third parties for this purpose so that they can serve you with relevant advertising on their websites.

You can find more information about the individual cookies we use and the purposes for which we use them in the table below:

Cookie Title Cookie Name Purpose
Val 0/1 To track activities
pharmacist_id Pharmacist ID To track which pharmacist/user is using Pharmsmart
cf_clearance Cloudflare ID Clearance Cookie stores the proof of challenge passed. It is used to no longer issue a challenge if present. It is required to reach an origin server.
cf_chl_3 Cloudflare ID These cookies are for internal use which allows Cloudflare to identify production issues on clients
_gid Unique id This cookie is used for Google Analytics to store and update a unique value for each page visited
_gat: Unique id This cookie is used for Google Analytics to throttle request rate
Cookie_policy true/false Track if cookies policy is accepted or not
PHPSESSID Unique id Php session id
My-application-browser-tab {"guid":"d6bff69a-38ee-ef84-cbab-309114db3806","timestamp":1714742295517,"register_name":"Adven Full Spectrum 5mg THC/10mg CBD Capsulesxxx 28 (AAA)"} Track CDsmart open drug in browser

Please note that the following third parties may also use cookies, over which we have no control. These named third parties may include, for example, advertising networks and providers of external services like web traffic analysis services. These third party cookies are likely to be analytical cookies or performance cookies or targeting cookies:

Google Analytics, Cloudflare

To deactivate the use of third party advertising cookies, you may visit the relevant consumer page to manage the use of these types of cookies.

To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout

You can configure your cookies settings with us at Cookie Settings (where you can accept all, reject all other than strictly necessary cookies or opt-in to any specific category of cookies)

If you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our or our website.

If you have any questions or concerns about our use of cookies, please email us at [email protected]

GDPR Compliance Statement - May 2020

1. Background

CDsmart acts as Data Processor, and has taken significant steps in the past 18 months to ensure it is fully compliant with the General Data Protection Regulation (GDPR).

This GDPR Compliance Statement sets out CDsmart Ltd’s approach to managing personal data as part of its risk management process. It provides assurance of CDsmart Ltd.’s GDPR compliance in relation to the personal data of all CDsmart Ltd. contacts, including: potential, existing and previous customers, supporters, employees, corporate contacts, partners and suppliers.

2. GDPR compliance actions

CDSMART LTD. has taken the following actions to ensure it is GDPR compliant by 12th may 2020:

  • All CDSMART LTD. personal data has been audited to record the data we hold, where it comes from and who can access it, and where it is stored, and has clear and documented ownership, retention periods and confirmed lawful basis for processing – which have been verified by our third party compliance advisers.
  • CDSMART LTD. has a Data Protection Policy which includes detailed guidance for all employees about how to obtain, store, use, process, secure, transmit and destroy personal data in compliance with the GDPR.
  • CDSMART LTD.’s Privacy Policy is published on the footer of its website, on all invoices sent and during the account creation process, and is regularly updated to reflect the measures taken by CDSMART LTD. in relation to personal data.
  • Other data privacy-related policies and processes are in place to meet the requirements of the GDPR, including: Data Retention Policy; Privacy Policy; Information Security Policy; Subject Access Request process, Incident Response Plan; IT Policy; Data Privacy Impact Assessment process; and Information Classification
  • Privacy by design is an integral part of CDSMART LTD.’s project and change management processes, to ensure that data privacy is considered at the outset of any processes or procedure development
  • GDPR training has been developed and delivered for all CDSMART LTD. employees; this training will form part of new employees’ induction to CDSMART LTD., and refreshed training will be undertaken annually.
  • Appropriate controls are in place to ensure that data is only accessed as necessary by authorized CDSMART LTD. personnel.
  • CDSMART LTD. has physical controls to ensure that all electronic data is secured to prevent it from being externally accessed.
  • CDSMART LTD. has an Incident Response Plan with breach protocols that meet GDPR requirements; this identifies named individuals that  are accountable in the event of a breach, and holds information about how relevant parties will be informed in event of a data-privacy related incident
  • Where appropriate, external suppliers and partners have the necessary contractual arrangements with CDSMART LTD. in place to ensure they are GDPR compliant.
  • CDSMART LTD. achieved PCI-DSS compliance in November 2015. CDSMART LTD. does not store credit/debit card details on our systems, and therefore the risk of cardholder data breach is low. This is now audited annually.

3. Obtaining and processing personal data

  • CDSMART LTD. obtains and processes personal data in accordance with the GDPR and historically, the Data Protection Act 1998, using one or more of the six lawful bases for processing as stated in the GDPR.
  • CDSMART LTD. does not sell personal data to any third parties under any circumstances, and will only share it with organizations we work with when its necessary and the privacy and security of the data is assured.

4. Storing personal data

  • CDSMART LTD. does not store data for longer than necessary; data retention periods are in place, and data owners are managing the destruction or anonymization of data once this retention period has ended.
  • CDSMART LTD. stores personal data both on its network at the CDSMART LTD. National Office in Matlock, and at an external Data center in Derby, that is specifically designed for this process. This facility is PCI-DSS and GDPR compliant.
  • CDSMART LTD. does not store customer credit or debit card details on any of our systems regardless of where they are hosted. Where card payments are taken, these are processed and transmitted using third party systems which are compliant with PCI-DSS.

5. Technical Security Measures and compliance

  • All staff are required to read and adhere to the ICT Acceptable Use Policy
  • All laptops, PC’s and Thin Clients are password protected
  • All laptop hard drives are encrypted
  • Smartphones are secured by a pin number if not accessed for 1 minute
  • Backups are stored on a Network Attached Storage Device which is stored in an externally owned secure PCI-DSS/GDPR compliant Data center in London and further backup is stored at Ocean Digital in London.
  • CDSMART LTD. maintain firewall with an active/passive configuration any changes are logged and checked in a change management log
  • We have a data privacy and systems Incident Response Plan to detect, report and investigate a personal data breach, which is tested and reviewed annually
  • CDSMART LTD. have annual penetration testing undertaken by a third party to test the security of its systems.
  • CDSMART LTD. websites are automatically updated by the hosting providers who will ensure it is up to date with all security patches.
  • Antivirus programs are installed on all IT servers and laptops and are automatically updated
  • Our server rooms are monitored with CCTV, and access to this area is tightly controlled for authorized personnel only using Key Card Access Controls
  • Regular maintenance of our ICT infrastructure is carried out and security patches are applied in a regular and timely manner
  • All CDSMART LTD. systems have appropriate technical security controls (eg encryption, verification, authentication and access controls) relative to the type of data stored.

6. Contacts and links

CDSMART LTD.’s Privacy Notice and T&C’s can be viewed at

https://pharmsmart.co.uk/privacypolicy.php

https://pharmsmart.co.uk/termsofservice.php

CDSMART LTD. is registered with the UK’s regulator the Information Commissioner’s Office (ICO) – Registration Number: ZA191941

The ICO’s website can be viewed at www.ico.org.uk

CDSMART LTD.’s Data Protection Team can be contacted by email at [email protected] or by writing to us at:

CDSMART LTD.

77-81 CHURCH ST

BOLTON

BL6 5EE

×

Pharmsmart Support

Get in touch

Help And Support